Privacy Policy

Juze Technologies Corporation d/b/a ZivaraCare ("ZivaraCare," "we," "us," or "our"), located at 5304 Daydream Drive, Raleigh, NC 27616, is the data controller for personal information collected through the ZivaraCare platform, website, and associated services (collectively, the "Service").

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@zivaracare.com.

We collect the following categories of personal information:

Account Information

• Name, email address, phone number, and mailing address
• Account credentials (password stored in hashed form)
• User role (Patient, Caregiver, Family Member, Transport Provider)
• Profile photo and biographical information you choose to provide

Health and Care Information

• Care needs, diagnoses, conditions, and preferences you enter into your care profile
• Visit notes, care plans, and summaries generated during service delivery
• Medications, allergies, and mobility or dietary needs you disclose

Payment and Financial Information

• Payment method details (processed and tokenized by Stripe — we do not store raw card numbers)
• Bank account information for caregiver payouts (processed by Stripe Connect)
• Transaction history and billing records

Location Information

• Service address and geographic area for matching with nearby caregivers
• Approximate location derived from IP address for fraud prevention

Device and Usage Information

• IP address, browser type, operating system, and device identifiers
• Pages visited, features used, and interactions with the Service
• Cookie data and similar tracking technologies (see our Cookie Policy)

Verification Information (Caregivers and Transport Providers)

• Government-issued ID documents
• Professional licenses, certifications, and credentials
• Background check results provided by Checkr, Inc.
• Vehicle registration and insurance information (Transport Providers)

• Directly from you: when you register, complete your profile, book services, submit care information, or contact our support team.
• Automatically: through cookies, log files, and analytics tools when you use the Service.
• From third parties: identity verification providers, background check services (Checkr), payment processors (Stripe), and authentication providers (Firebase).
• From other users: Family Members may provide information about Patients; Patients may invite Family Members and share access to care information.

• Create and manage user accounts, profiles, and care relationships.
• Match Patients with appropriate Caregivers or Transport Providers based on care needs and location.
• Process payments, manage payouts, and maintain billing records.
• Verify caregiver and transport provider credentials and conduct background checks.
• Generate AI-powered care plan suggestions and visit summaries using our AI partners.
• Send transactional communications such as booking confirmations, reminders, and receipts.
• Send optional product updates, newsletters, and promotional communications where you have opted in.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations, enforce our Terms of Service, and resolve disputes.
• Improve the Service through aggregated and de-identified analytics.
• Enable Family Member access as authorized by Patients.

For users in the European Economic Area, United Kingdom, and Switzerland, we process personal data on the following legal bases:

• Contract: Processing necessary to provide the Service pursuant to our Terms of Service (account management, booking facilitation, payment processing).
• Legitimate Interests: Fraud prevention, platform security, and improvement of the Service through aggregated analytics, where our interests are not overridden by your privacy rights.
• Consent: Marketing communications, optional analytics cookies, and AI feature processing where you have provided explicit consent.
• Legal Obligation: Compliance with applicable laws, regulations, court orders, and legal process.

We share personal information only as described in this Policy. We do not sell your personal information. We may share data with the following categories of recipients:

• Stripe, Inc.: Payment processing and caregiver payout management.
• Twilio, Inc.: SMS and voice notifications for bookings, reminders, and two-factor authentication.
• Google Firebase (Google LLC): Authentication, real-time database, and push notifications.
• Anthropic, PBC: AI-powered care plan generation and visit summary features. See Section 7 for details.
• Amazon Web Services (AWS): Cloud infrastructure, data storage, and hosting.
• Checkr, Inc.: Background screening for caregivers and transport providers.

All sub-processors are bound by data processing agreements that restrict their use of your information to the purposes for which it was shared. We may also disclose information when required by law, or in connection with a merger or acquisition (with advance notice to you).

ZivaraCare uses Anthropic's Claude models to power features such as care plan suggestions and visit summary generation. When you use these features, certain data — which may include care notes, visit descriptions, and care preferences — is transmitted to Anthropic for processing.

We seek to minimize the amount of identifiable information sent to AI models. We do not knowingly transmit full names, Social Security numbers, or raw financial account numbers to AI models. Anthropic is bound by a data processing agreement with ZivaraCare.

AI-generated content is not medical advice. See our AI Disclaimer for more information.

The Service may process information that constitutes Protected Health Information ("PHI") under HIPAA. Where ZivaraCare acts as a Business Associate to a Covered Entity, it does so pursuant to a Business Associate Agreement ("BAA").

We implement administrative, technical, and physical safeguards designed to protect PHI in accordance with the HIPAA Security Rule. Health and care information you enter into your care profile is used only to facilitate care services, generate care plan suggestions, and support your care team as you have authorized.

Patients may authorize Family Members to access their care profile, view schedules, and communicate with Caregivers. Patients control the scope of access granted to each Family Member and may revoke access at any time through their account settings.

By authorizing a Family Member, you consent to sharing your care information with that individual as described within the access grant. ZivaraCare is not responsible for how authorized Family Members use the information you have shared with them.

We retain personal information for as long as necessary to provide the Service, meet our legal obligations, resolve disputes, and enforce our agreements:

• Account data: Duration of your account plus up to 7 years after closure.
• Transaction and payment records: 7 years in accordance with tax and accounting regulations.
• Health and care records: Minimum of 7 years per applicable healthcare retention laws.
• Log and analytics data: Up to 24 months in identifiable form, then aggregated or deleted.

We implement industry-standard technical, administrative, and physical security measures to protect your personal information, including encryption of data in transit (TLS 1.2+), encryption of sensitive data at rest, access controls, regular security assessments, and multi-factor authentication for administrative access.

No security system is impenetrable. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

All Users

• Access and obtain a copy of your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal retention obligations)
• Opt out of marketing communications at any time

California Residents (CCPA/CPRA)

• Know what personal information we collect, use, disclose, and sell
• Delete personal information we have collected about you
• Opt out of the sale or sharing of personal information (we do not sell data)
• Limit the use of sensitive personal information
• Non-discrimination for exercising CCPA rights

EEA, UK, and Swiss Residents (GDPR/UK GDPR)

• Data portability — receive your data in a structured, machine-readable format
• Restrict processing of your personal data in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with your local supervisory authority

North Carolina Residents

North Carolina residents may exercise rights consistent with the North Carolina Identity Theft Protection Act and other applicable state laws.

To exercise your rights, contact us at privacy@zivaracare.com. We will respond to verifiable requests within 45 days (extendable by an additional 45 days where required by law).

ZivaraCare does not sell your personal information to third parties for monetary consideration. We do not share personal information with third parties for their independent marketing purposes.

If you are a California resident and wish to submit a "Do Not Sell or Share" request, contact us at privacy@zivaracare.com.

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and analyze usage patterns. For a full description of the cookies we use and how to control them, see our Cookie Policy.

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information about a minor, please contact us at privacy@zivaracare.com.

ZivaraCare is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission (or equivalent mechanisms) as the legal basis for such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy with an updated effective date and notify you by email or prominent in-app notice at least 14 days before the changes take effect.

For privacy-related inquiries, please contact our Privacy Team:

Effective date: April 19, 2026.